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1.0 SUMMARY 


The Reaction Control System (RCS) is not completely 
defined at this time. The configuration considered in 
this document is shown in the illustrations included in 
this document. 

Future configuration changes should have little impact 
on the measurements required for fault detection and 
annunciation. 

One hundred and eleven measurements have been identified 
for use in fault detection and annunciation, that are not 
included in the Master Measurements List, dated November 16, 
1973. 


These measu-ements are divided into the following 


categories : 

• Burn through monitors 44 ea 

• Engine temperatures 4 ea 

• Manifold pressures 30 ea 

• Shut-off valve positions 22 ea 

• Redundant helium source pressures 9 ea 

• Cargo bay tank pressures 2 ea 


Consideration should be given to including the following 
in the design of the reaction jet drivers: 

• Redundant chamber pressure sensors. 
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• Jet driver output monitors. 

• Jet driver electrical-ON failure isolation 
capability. 

• Single jet driver power isolation capability. 

• Failure identification annunciation. 
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2.0 INTRODUCTION 
2.1 Purpose 

This document defines the functional paths of the RCS 
and defines the operational flight instrumentation required 
for performance monitoring fault detection and annunciation. 


A functional path, as used in this document, is defined 
as o?ie or more functional elements which may be combined 
into operating functional paths which are controllable or 
selectable by the flight crew for systems management. 


2.2 System Description 


2.2.1 Reaction Control System (RCS) . The RCS, oper- 
ating in conjunction with the Guidance Navigation and Control 
Subsystem, employs 38 bipropellant primary and six vernier 
thrusters to provide precise attitude control and three- 
axis translation during sepai at i»n from the external tank, 
orbit insertion, orbital and reentry phases of flight. 

In addition, the RCS provides roll control during single 
engine orbital maneuvering system burns. 


2.2.2 RCS organization . The RCS consists of three 
independent propulsion packages. One module, comprising 14 
primary thrusters and two verniers, is located in the forward 
fuselage and the other two modules, each containing 12 
primary thrusters and two vernier thrusters, are contained 
in the auxiliary propulsion subsystem mounted on each side 
of the aft fuselage. 
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2.2.3 RCS components . Each RCS Propulsion Package 
contains a propellant storage and distribution system, a 
helium pressurant gas storage regulation and distribution 
system, a thermal control assembly, and electrical and flight 
instrumentation system. Each primary thruster produces 
approximately 900 pounds thrust. The vernier thrusters 
provide approximately 25 pounds thrust each. 

2.2.4 RCS propellant supply . The hypergolic RCS pro- 
pellants are nitrogen tetroxide (^0^) and monomethalhydrazine. 
Each RCS is normally supplied propellants from its own 
dedicated set of tanks. Crossfeed lines provide the capa- 
bility to supply propellant to either aft RCS thrusters from 
one of the following sources: 

• OMS propellant tanks 

• Cargo bay kit tanks 

• Pod tanks from the opposite RCS 

2.2.5 RCS activation . During liftoff and ascent, the 
RCS is inactive with the helium isolation vaives closed and 
the propellant isolated from the thruster bipropellant valve 
inlets by the propellant isolation valves. Prior to external 
tank jettison, the propellant isolation valves, the helium 
isolation valves, and the RCS doers are commanded open and 
the RCS propellant and pressurization subsystems are ready 
for operation 

2.2.6 R CS x entry configuration . The forward RCS is 
not used during reentry. Prior to reentry, the forward RCS 
jets are deactivated, and the RCS doors are closed. 
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2.2.7 Failed thruster monitoring . Guidance and control 
will monitor for failed thrusters. If is assumed that a 
fault word will be provided from the guidance and control 
computer for performance monitoring fault annunciation. 

2.2.8 RCS configuration status . Several areas of the 
RCS are not defined at this time. For the purpose of this 
report, these areas are assumed to be as shown on the system 
prints in this document. 

Vernier jet location and manifold connections, RCS 
door instrumentation, and the guidance and control monitors 
are likely change points. 
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3.0 FUNCTIONAL PATH ANALYSIS OF THE FORWARD RCS 

3.1 Functional Path Identification 

The functional paths for the forward RCS are identified 
as RCXX on figures 1 through 3. 

3.2 Functional Path Description 



RC1 is the helium source bottle for supplying helium 
pressure to the fuel tank. The bottle has a volume of 
approximately 2.02 cubic feet and is pressurized to 3600 
psia prior to liftoff. RC2 provides the same function for 
the oxidizer tank. 


RC3 through RC6 are heliait isolation valves in series 
with two helium regulators. They provide helium source 
isolation and regulate source pressure to a propellant tank 
pressure of approximately 280 psia. 

RC7 and RC8 are series parallel check valves that 
isolate propellant from the helium regulators. 


j RC9 and RC10 provide over pressure relief for the fuel 

l 

» and oxidizer tanks. They consist of a normally open shut- 

| . off valve (SOV) in series with a burst disc and a poppet 

l relief valve. Over pressure will rupture the burst disc 

t allow 'ug excess helium to be vented. In the event the poppet 

\ valve fails to reseat, the SOV is closed by the crew. 




RC1 ; RC2 



Figure 1. - Forward RCS propellant supply functional paths. 







Figure 2. - Functional paths forward RCS A and C manifold thrusters. 
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RC11 and RC12 are propellant holding tanks. Each j 

tank has a volume of approximately 14 cubic feet. | 

5 

RC15 through RC18 are tank isolation valves used to 
isolate propellant flow from the propellant tanks to the ! 

manifold isolation valves. ; 

RC19 through RC28 are manifold isolation valves. Each 
valve controls the flow of fuel or oxidizer to the inlet of 
four primary or two vernier jets. In the event of a failed- 
on thruster or a leak, both the fuel and oxidizer .anifold 
isolation valves associated with the failure are closed. 

RC29 through RC64 are engine inlet valves for fuel and 
oxidizer. Each engine has a dedicated jet driver which 
opens and closes the fuel and oxidizer inlet valves on 
command. 



3.3 Operating Functional Paths 

Functional paths are combined into operating functional 
paths for fault detection and annunciation. T^e operating 
functional paths are identified as ORCXX. A total of 16 
fuel and 16 oxidizer functional paths exist in the forward 
RCS system. 

All functional paths for fuel are identical from the 
helium source to the fuel tank isolation valves. 

0RC1 = (RC1) (RC3 + RC5) (RC7) (RC11) 
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In addition, two sets of eight engines have a common 
path through the fuel tank isolation valves. 

0RC2 = (ORC1) (RC15) 

ORC3 * (ORC1) (RC17) 

Five groups of engines have common fuel paths through 
the manifold isolation valves. 

0RC4 * (0RC2) (RC21) for Manifold A 

0RC5 * (0RC3) (RC22) for Manifold C 

0RC6 = (ORC2) (RC23) for Manifold B 

0RC7 = (0RC3) (RC24) for Manifold D 

ORC8 = (0RC2) (RC19) for Manifold E 

The complete fuel flow path for each engine is the 
manifold path combined with the engine inlet. The fuel 
flow paths for the engines are: 


0RC9 = 

(0RC4) 

(RC41) 

for 

Jet 

1 

ORCIO = 

(0RC4) 

(RC49) 

for 

Jet 

5 

0RC11 = 

(0RC4) 

(RC33) 

for 

Jet 

9 

0RC12 « 

(0RC4) 

(RC57) 

for 

Jet 

13 

0RC13 = 

(0RC5) 

(RC37) 

for 

Jet 

3 

0RC14 = 

(0RC5) 

(RC45) 

for 

Jet 

7 

0RC15 = 

(0RC5) 

(RC29) 

for 

Jet 

11 

0RC16 = 

(0RC5) 

(RC53) 

for 

Jet 

15 

0RC18 = 

(0RC6) 

(RC42) 

for 

Jet 

6 

0RC19 = 

(0RC6) 

(RC58) 

for 

Jet 

10 

0RC21 = 

(0RC7) 

(RC46) 

for 

Jet 
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ORC22 » (0PC7) (RC38) 


for Jet ** 


ORC23 *> (0RC7) (RC54) 


for Jet 12 


ORC24 = (0RC7) (RC30) 


for Jet 16 


0RC51 = (0RC8) (RC61) 


for Jet 101 


ORC52 « (0RC8) (RC62) 


for Jet 102 


Oxidizer flow paths are similar and compiled as follows 

• Common Path to Tank Isolation Valves 
ORC25 = (RC2) (RC4 + RC6) (RC8) (RC12) 

• Common Paths through Tank Isolation valves 
ORC26 * (ORC25) (RC18) 

ORC27 * (ORC25) (RC16) 

• Common Paths to Manifolds 


ORC28 * (ORC26) (RC25) 
ORC29 = (ORC27) (RC27) 


A Manifold 


C Manifold 


ORC30 = (ORC26) (RC26) 


B Manifold 


0RC31 = (ORC27) (RC28) 


D Manifold 


ORC32 = (ORC26) (RC20) 


E Manifold 


9 Oxidizer Flow Paths to Jet. 


ORC33 * (ORC28) (RC43) 


for Jet 1 


ORC34 = (ORC28) (RC51) 


for Jet 5 


ORC35 ^ (ORC28) (RC35) 


for Jet 9 


ORC36 = (ORC28) (RC59) 


for Jet 13 


ORC37 = (ORC29) (RC39) 


for Jet 3 


0RC38 = (ORC29) (RC47) 
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ORC39 

m 

(ORC29) 

(RC31) 

for 

Jet 

11 

ORC40 

a 

(ORC29) 

(RC55) 

for 

Jet 

15 

ORC42 

= 

(ORC30) 

(RC44) 

for 

Jet 

6 

ORC43 

a 

(ORC30) 

(RC60) 

for 

Jet 

10 

ORC45 

* 

(0RC31) 

(RC48) 

for 

Jet 

4 

ORC46 

3 

(CRC31) 

(RC40) 

for 

Jet 

8 

ORC47 

M 

(0RC31) 

(RC56) 

for 

Jet 

12 

ORC48 

= 

C0RC31) 

(RC32) 

for 

Jet 

16 

ORC49 

= 

(ORC32) 

CRC63) 

for 

Jet 

101 

ORC50 

= 

(ORC32) 

(RC64) 

for 

Jet 

102 


3-8 



! 


1 


I 



4.0 MEASUREMENT REQUIREMENTS FOR FAULT DETECTION 
AND ANNUNCIATION - FORWARD RCS 

4.1 FDA Measurements 

Table 1 lists the primary, correlation, and precondi- 
tioning measurements required for fault detection and 
annunciation. The table identifies 28 new measureir.snts not 
included in the Master Measurements List, dated November 16, 
1973. Measurement justification is also included in table 1. 
Figures 4 through 6 show the approximate location of the 
forward RCS measurements. 



4.2 Description of Parameters to be Monitored 

4.2.1 Helium source pressure . Helium source pressure 
is used for propellant gauging and is the best overall 
indicator of system integrity. In the event the source 
pressure measurement is lost, the system status and propel- 
lant remaining cannot be determined; thorefore, redundant 
source pressure measurements should be added. 

4.2.2 Propellant pressures . Helium SOV positions 
provide a precondition check to determine if the system is 
static or dynamic. Regulator output is required to isolate 
leaks and failed components such as regulators, helium SOV'j, 
and vent valves. 


Tank outlet pressure provides a correlation check for 
regulator output pressure. 
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Figu e 5. - Forward manifolds B, E, and E instrumentation. 
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Figure 6. - Forward manifolds A and C instrumentation 
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4.2.3 Manifold pressures . Tank outlet SOV's and mani- | 

fold isolation valves provide precondition checks for mani- \ 

fold pressure checks. 5 

Manifold pressure transducers should be added to provide j 

rapid leak isolation capabilities. Heat soak back monitoring j 

for failed manifolds would also be provided by these -i 

l 

transducers. 

4.2.4 Thruster temperature . Thr.ster temperature * 

transducers should be monitored for overtemperature during 

burns and for leak indications during quiescent periods. j 

In addition, the engine procurement specification 
provides for burn-through monitors on each engine. It is 
anticipated that they will be monitored by PMS. 


4.3 Leak Detection Methods 

4.3.1 Quantity remaining . P^emission helium profiles 
are not adequate for helium monitoring. Leaks can be 
detected by correlating helium source pressure with quantity 
of propellant remaining. Since quantity remaining is gauged 
by helium pressure, volume, and temperature, quantity measure- 
| ments become inaccurate when a leak is introduced into the 

system. A thruster-on time multiplied by flow rate calculation 
should be correlated with quantity remaining. 

f 4.3.2 Delta pressure . The helium source pressure delta 

! for fuel and oxidizer should be nearly constant, since equal 

( volumes of fuel and oxidizer are being consumed. A change 

in the delta pressure is indicative of a leak. 
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5.0 FUNCTIONAL PATH ANALYSIS OF THE , 

AFT RCS 

5.1 Functional Path Identification 

The functional paths for the aft RCS are identified 
as RCXX on figures 7 through 10. 

5.2 Functional Path Description - Aft Left RCS 

RC70 is the helium source bottle for supplying helium 
pressure to the fuel tank. The bottle has 2.02 cubic feet 
volume and is pressurized to 3600 psia prior to liftoff. 

RC71 provides the same function for the oxidizer tanks. 

RC72 through RC75 are helium isolation valves in series 
with two helium regulators. They provide helium isolation 
and regulate source pressure to a propellant tank pressure 
of approximately 280 psia. 

RC76 and RC77 are series parallel check valves that 
isolate propellants from the helium regulators. 

RC80 and RC81 provide over pressure relief for the 
fuel and oxidizer tanks. They consist of a normally open 
SOV in series with a burst disc and a poppet relief valve. 
Over pressure will rupture the burst disc allowing excess 
helium to be vented. In tne event the poppet valve fails 
to reseat, the SOV is closed by *-he crew. 
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Left aft RCS functional paths. 





^r*,y**nn''t'**\'%*** • "*- > , <**■■ ’»' '-j. »*•*»'• *,■«*■»»»' %*:'*•? *r *w«/v 


1 

i» 


RC211 


RC209 


RC208 


indi 



RC206 x 
RC205 * 

o 


RC204 


RC203 


RC202 

RC201 

vO 

RC200 

RC199 


RC198 


RC197 


RC190 


RC189 


CM 


RC196 

X 

bC 

RC195 

•H 

c£ 

CO 

RC194 >- 

RC193 ' 

1 

• 

o 

00 

H 

RC192 

c; 

RC191 

3 

o 

DO 

1 N 

•»-» 

i 

VD 

U* 


Rem* 
RC187^ 
RC186 ^ 
RC185 £ 
RC184 ‘ 


SK]: 




1 


I 


I 


RC82 and RC83 are propellant holding tanks. Each tank 
has a volume of approximately 14 cubic feet. 

RC84 through RC89 are tank isolation valves used to 
isolate propellant flow from the propellant tanks to the 
thruster manifolds. 

RC90 through RC99 are manifold isolation valves used 
to control the flow of propellant to three primary jets or 
two vernier jets. In the event of a failed-on thruster or 
a leak, the fuel and oxidizer manifold isolation valves 
associated with the failure are closed. 

RC104 through RC131 are engine inlet valves for fuel 
and oxidizer. Each engine has a dedicated jet driver which 
opens and closes the fuel and oxidizer inlet valves on 
command. 


5.3 Functional Path Description of Right Aft RCS 

The right aft RCS has components identical to those in 
the left aft RCS. The functional path description is, there- 
fore, the same as the left aft RCS except for the functional 
path numbering 


5.4 Operating Functional Paths 

The functional paths of the aft RCS are combined into 
operating functional paths for fault detection and annuncia- 
tion. The operating functional paths are identified as 
ORCXXX. A total of 14 fuel and 14 oxidizer operating 
functional paths exist in each aft RCS. 
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5.4.1 Fuel operating functional paths - aft left RCS . 
All 14 functional paths for fuel are identical from the 
helium source to the tank isolation valves. The common fuel 
path is identified as: 

ORCIOO - RC70 (RC72 + RC74) (RC76) (RC78) (RC82) 

In addition, eight engines have a common fuel path 
through parallel tank isolation valves and the remaining 
six engines have a common path through the remaining tank 
isolation valve. The fuel paths are identified as: 

ORC101 - (ORCIOO) (RC84 + RC86) 

ORC102 = (ORCIOO) (RC88) 


- 





Past the tank isolation valves the functional paths 
branch to the manifolds as follows: 

ORC103 « (ORC101) (RC94) Manifold A 

ORC104 = (ORC101) (RC92) Manifold B 

ORC105 * ORC101 (RC90) Manifold E 

ORC106 = ORC102 (RC96) Manifold C 

ORC107 = ORC102 (RC98) Manifold D 



The complete fuel flow functional paths for the engines 
are given below: 

ORC108 = (ORC103) (RC106) Engine 25 

ORC109 * (ORC103) (RC114) Engine 23 

0RC1] 0 * (ORC103) (RC122) Engine 31 

OAC111 = (ORC104) (RC110) Engine 21 J 

ORC112 * (ORC104) (RC118) Engine 33 

3 

I 


a 

*! 






ORC113 

B 

(ORC104) 

(RC124) 

Engine 

37 

ORC114 

B 

(ORCIOS) 

(RC7.28) 

Engine 

103 

ORC115 

B 

(ORC105) 

(RC130) 

Engine 

105 

ORC116 

K 

(ORC106) 

(RC112) 

Engine 

19 

ORC117 

B 

(ORC106) 

(RC104) 

Engine 

27 

ORC118 

B 

(ORC106) 

(RC120) 

Engine 

35 

ORC119 

S 

(ORC107) 

(RC108) 

Engine 

29 

ORC120 

B 

(ORC107) 

(RC116) 

Engine 

17 

0RC121 

= 

(ORC107) 

(RC126) 

Engine 

39 


5.4.2 Oxidizer operating functional paths - aft left 
RCS . The oxidizer operating functional paths are similar 
to the fuel operating functional paths and are compiled as 
follows . 

The common path to the tank isolation valve is: 

ORC122 * (RC71) (RC73 + RC75) (RC77) (RC79 (RC33) 

The common oxidizer paths through the tank isolation 
paths are: 

ORC123 * (ORC122) (RC85 + RC89) 

ORC124 * (ORC122) (RC87) 

The common oxidizer paths to the oxidizer manifolds are 


ORC125 = 

(ORC123) 

(RC91) 

Manifold 

A 

ORC126 * 

(ORC123) 

(RC93) 

Manifold 

B 

ORC127 = 

(ORC123) 

(RC95) 

Manifold 

E 

ORC128 = 

(ORC124) 

(RC97) 

Manifold 

C 

ORC129 = 

(ORC124) 

(RC9S) 

Manifold 

D 
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The oxidizer operating functional flow paths to the 


engines are 

defined as 

follows : 



ORC130 

* 

(ORC125) 

(RC107) 

Engine 

25 

0RC131 

** 

(ORC125) 

(RC115) 

Engine 

23 

ORC132 

s 

(ORC125) 

(RC123) 

Engine 

31 

0RC133 

= 

(ORC126) 

(RC111) 

Engine 

21 

ORC134 

= 

(ORC126) 

(RC119) 

Engine 

33 

ORC135 

s 

(ORC126) 

(RC125) 

Engine 

37 

ORC136 

= 

(ORC127) 

(RC129) 

Engine 

103 

ORC137 

= 

(ORC127) 

(RC131) 

Engine 

105 

0RC138 

= 

(ORC128) 

(RC113) 

Engine 

19 

ORC139 

= 

(ORC128) 

(RC105) 

Engine 

27 

ORC140 

= 

(ORC128) 

(RC121) 

Engine 

35 

0RC141 

= 

(ORC129) 

(RC109) 

Engine 

29 

ORC142 

= 

(ORC129) 

(RC117) 

Engine 

17 

0RC143 

= 

(ORC129) 

(RC127) 

Engine 

39 


5.4.3 Fu el operating functional paths - aft right RCS . 

The operating functional fuel path from the helium source 
to the propellant tank SOV’s is common to all 14 engines, 
and is identified as: 

ORC200 = (RC150) (RC152 + RC154) (RC156) (RC158) (RC162) 

The operating functional fuel flow path, divides into 
two paths at the tank SOV’s. They are defined as follows: 

ORC201 - (ORC200) (RC164 + RC166) 

ORC202 * (ORC200) (RC168) 

.?* 
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The five operating functional fuel flow paths to the 
fuel manifolds are defined by: 

ORC203 = (ORC201) (RC170) Manifold A 

ORC204 = (ORC201) (RC172) Manifold B 

ORC205 - (ORC201) (RC174) Manifold E 

ORC206 » (ORC202) (RC176) Manifold C 

ORC207 - (ORC202) (RC178) Manifold D 

The complete operating functional fuel flow paths for 
the engines are given below: 

ORC2C8 * (ORC203) (RC188) Engine 26 

ORC209 - (ORC2U7) (RC196) Engine 24 

ORC210 * (ORL2U3) (RC20*) Engine 38 

CR.C211 - (ORC20,j (RCiee) "ngine 28 

ORC212 = (ORC204J v.;:E.l94) Engine 22 

ORC213 = (ORC204) (RC202) Engine 32 

ORC214 = (ORC205) (RC208) Engine 104 

ORC215 * (ORC205) (RC210) Engine 106 

ORC216 * (ORC206) (RC190) Engine 20 

ORC217 = (ORC206) (RC189) Engine 34 

OPC218 = (ORC206) (RC204) Engine 40 

ORC219 = (ORC207) (RC184) Engine 30 

ORC220 * (ORC207) (RC192) Engine 18 

ORC221 * (ORC207) (RC200) Engine 36 
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5.4.4 Oxidizer operating functional paths - aft right 
RCS . The oxidizer operating functional flow path from the 
helium source to tank SOV's is common to all engines and 
is defined as: 

ORC222 = (RC151) (RC153 + RC155) (RC157) (RC159) (RC163) 

The oxidizer operating functional flow paths through 
the tank SOV’s are defined as: 

ORC223 - (ORC222) (RC165 + RC169) 

ORC224 = (ORC222) (RC167) 

The oxidizer operating functional flow paths to the 
oxidizer manifolds are: 


ORC225 

s 

(ORC223) 

(RC171) 

Manifold A 


ORC226 

* 

(ORC223) 

(RC173) 

Manifold B 


ORC227 

SB 

(ORC223) 

(RC175) 

Manifold E 


ORC228 

= 

(ORC224) 

(RC177) 

Manifold C 


ORC229 

S 

(ORC224) 

(RC179) 

Manifold D 

's 

The complete oxidizer operating functional flow paths 
:he engines are given below: 

t 

s 

ORC230 

m 

(ORC225) 

(RC189) 

Engine 26 

•ri 

ORC231 

= 

(ORC225) 

(RC197) 

Engine 24 

i 

ORC232 


(ORC225) 

(RC207) 

Engine 38 

s 

.1 

ORC233 

= 

(ORC226) 

(RC203) 

Engine 32 


ORC234 

s 

(ORC226) 

(RC195) 

Engine 22 


ORC235 

= 

(ORC226) 

(RC187) 

Engine 28 


ORC236 

= 

(ORC227) 

(RC209) 

Engine 104 

•i 
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ORC237 

ORC238 

0RC239 

ORC240 

ORC241 

ORC242 

ORC243 


(ORC227) (RC211) 
(ORC228) (RC205) 
(ORC228) (RC199) 
(ORC228) (RC191) 
(ORC229) (KC185) 
(ORC229) (RC193) 
(ORC229) (RC201) 


Engine 106 
Engine 40 
Engine 34 
Engine 20 
Engine 30 
Engine 18 
Engine 36 
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6.0 MEASUREMENT REQUIREMENTS FOR FAULT DETECTION 
AND ANNUNCIATION - AFT RCS 

6.1 FDA Measurements 


i 

j 


Tables 2 and 3 list the primary, correlation, and pre- *-! 

conditioning measurements required for fault detection and 3 

annunciation for the right and left aft RCS. The tables 
identify 72 new measurements rot included in the Master | 

Measurements List, dated November 16, 1973. Measurement 
justification is also included in tables 2 and 3. Figures 11 
through 14 show the approximate location of the aft RCS 
measurements . 


6.2 Description of Parameters to be Monitored 

6.2.1 Helium source pressure . Helium source pressure is 
used for propellant gauging and is the best overall indicator 
of system integrity. In the event the source pressure 
measurement fails, the system status and propellant remaining 
cannot be determined; therefore, redundant source pressure 
measurements should be added to the four helium tanks. 


6.2.2 Propellant pressures . Helium SOV positions provide 
a precondition check to determine if the system is static 
or dynamic. Regulator output is required to isolate leaks 
and tailed components such as regulators, helium SOV's, and 
vent valves. 


Tank outlet pressure provides a correlation check for 
regulator output pressure. 
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Figure 11. — Left aft RCS measurements foi FDA 
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Figure 13. — Right aft RCS measurements for FDA. 
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6.2.3 Manifold pressures . Tank outlet SOV's, manifold 
isolation valves, and RCS crossfeed valve positions provide 
precondition checks for manifold pressure checks. 

Manifold pressure transducers should be added to pro- 
vide rapid leak isolation capability and engine inlet pressure 
monitoring during crossfeed operation. Heat soak back moni- 
toring for isolated manifolds would also be provided by 
these transducers. 

6.2.4 Thruster temperature . Thruster temperature 
transducers should be monitored for overtemperature during 
burns and for leak indications during quiescent periods. 

In addition, the engine procurement specification pro- 
vides for burn through monitors on each engine. It is antici- 
pated that they will be monitored by PMS. 

6.3 Leak Detection Methods 

6.3.1 Quantity remaining . Premission helium profiles 
are not adequate for helium monitoring. Leaks can be detected 
by correlating helium source pressure with the quantity of 
propellant remaining. Since quantity remaining is gauged by 
helium pressure, volume, and temperature, quantity measurements 
become inaccurate when a leak is introduced into the system, 

A thruster-on time multipl ; ed by flow rate calculation should 
be correlated with quantity remaining. Care must be exorcised 
to charge propellant to the proper tanks during crossfeed 
operation. 
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6.3.2 Delta pressure . The helium source pressure 
delta for fuel and oxidizer should be nearly constant, since 
equal volumes of fuel and oxidize? are being consumed. A 
change in eke delta pressure is indicative of a leak. 
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TABLE 2.- RIGHT AFT RCS MEASUREMENTS FOR FDA - Continued 
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TABLE J.- RIGHT AFT RCS MEASUREMENTS FOR FDA - Continued 
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7.0 RCS CROSSFEED OPERATION 


^.1 Configuration 

Additional fuel and oxidizer functional flow paths to 
the RCS manifolds are available from each tank on tho cross- 
feed 1 ine. 

The crossfeed configui ation is c hown in figures 15 
and 16. 


7.2 Ope.ational Guidelines 

To avoid propellant transfer due to differential 
pressure, only one propellant tank *t a time is connected 
to its respective crossfeed line. To insure equal manifold 
pressure, the fuel and oxidizer tank connected to their 
respective cro^feed line are from the same s. osystem. 

Tl.e left and right aft RCS may be operated simultaneously 
from the crossfe^d lines. 

7.3 Crossfeed Components 

Two additional shut-off valves connect each crossfeed 
line tc the aft left and right RCS. These valves are identi- 
fied as RC301 through RC308 (see figs. 15 an- 16). 

4 Propellant Operating Functional Paths 
for PCS Cross feed 
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Fuel crossfeed 
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7.4.1 RCS fuel tanks to crossfeed line . The fuel 
operating functional paths from the tanks to the crossfeed 
lines are defined as follows: 

Left aft RCS (ref. section 5.4.1) 

ORC320 = (ORCIOO) [(RC84 ♦ RC86) (RC504) + 

(RC88) (RC302) ] 

Right aft RCS (ref. section 5.4.3) 

ORC300 = (ORC200) [(RC164 ♦ RC166) (RC308) + 

(RC168) (RC306) ] 

7.4.2 RCS oxidizer tanks to cross feed lines . The 
oxidizer functional paths from the tanks to the crossfeed 
lines are defined as follows: 

Left aft RCS (ref. section 5.4.2) 

ORC321 = (ORC122) [(RC85 + RC89) (RC303) + 

(RC87) (RC30 1 )] 

Right aft RCS (ref. section 5.4.4) 

ORC301 = (ORC222) [(RC165 + RC169) (RC307) + 

(RC167) (RC3Q5) ] 

7.4.3 Crossfeed from aft right RCS tanks to aft left 
RCS manifolds . The operating functional flow paths from 
the right aft RCS propellant tanks to the left aft RCS man 
folds are given below (ref. sections 7.4.1 and 7.4.2): 

• A Fuel Manifold 

ORC302 = (ORC300) (RC304) (RC94) 

• B Fue 1 Manifold 

0RC303 = (ORC300) (RC304) (RC92) 
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• E Fuel Manifold 

ORC304 « (ORC300) (RC304) (RC90) 

• C Fuel Manifold 

ORC30S - (ORC300) (RC302) (RC96) 

• 0 Fuel Manifold 

ORC306 - (ORC300) (RC302) (RC98) 

• A Oxidizer Manifold 

ORC307 - (ORC301) (RC305) (RC91) 

• B Oxidizer Manifold 

0RC3Q8 - (ORC301) (RC303) (RC93) 

• E Oxidizer Manifold 

ORC309 » (ORC301) (RC303) (RC95) 

• C Oxidizer Manifold 

ORC310 *= (ORC301) (RC301) (RC97) 

• D Oxidizer Manifold 

ORC311 « (ORC301) (RC301) (RC99) 

7.4.4 Crossfeed from aft left RCS tanks to aft right 
RCS mani r olds . The operating functional flow paths from the 
left aft RCS propellant tanks to the right aft RCS manifolds 
are given below (ref. sections 7.4.1 and 7.4.2): 

• A Fuel Manifold 

ORC322 * (ORC320) (RC308) HIC170) 

• B Fuel Manifold 

ORC323 - (ORC320) (RC308) (RC172) 

• E Fuel Manifold 

ORC324 * (ORC320) (KC308) (RC174) 
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• C Fuel Manifold 

ORC325 * (ORC320) (RC306) (RC176) 

• D Fuel Manifold 

ORC326 = (ORC320) (RC306) (RC178) 

• A Oxidizer Manifold 

ORC327 = (ORC321) (ORC307) (RC171) 

• B Oxidizer Manifold 

ORC328 = (ORC321) (ORC3071 (RC173) 

• E Oxidizer Manifold 

ORC329 = (ORC321) (ORC307) (RC175) 

• C Oxidizer Manifold 

ORC330 * (ORC321) (ORC30S) (RC177) 

• D Oxidizer Manifold 

ORC331 = (ORC321) (DRC305) (RC179) 

7.5 Measurements 

No additional measurements are required for RCS cross - 
feed operation. 
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8.0 RCS, OMS INTERCONNECT OPERATION 
8.1 functional Paths for OMS/RCS Interconnect 

The OMS functional paths used for RCS interconnect are 
shown in figure 17. ' r ^ are identified as OMXX. Functional 

paths are combined iu.o operating functional paths and identi- 
fied a: OOMXX . 

H .* :unctional Path Analysis of OMS Propellant 
Path to CrossfeeJ Lines 

GM1 uiid 0M2 are helium source tanks. Lach tank has a 
volume of 15.4 cubic feet. l’he tanks are pressurized to 
approxim; 1 .ely 4000 psia prior to launch. 

OM5 through OM6 are helium isolation shut-off valves 
in series with a primary and secondary helium regulator, 
rank pressure is regulated to approximately 213 psig. 

OM n through O'llO are shut-off valves to isolate oxidizer 
from the helium manifold during periods when tanks are not 
in use. 

0M11, DM12, 0M1S, and OM16 are series parallel check 
valves to isolate propellant from the helium manifold. 

OM13, 0M14, OM17, and 0M18 are manual shut-off valves 
used for ground servicing only. 
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; 0M19 through OM22 are burst disc in series with poppet 

relief valves for relieving helium overboard, in the event 
a failure results in over pressurization of the tank. 

OM23 through OM26 are propellant holding tanks. Each 
tank has a volume of approximately 89.5 cubic feet. 

OM27 througn OM34 are pairs of parallel redundant shut- 
off valves. Either valve in a pair can flow enough propellant 
to support an OMS engine burn. 

OM35 through OM39 and 0M41 through 0M44 are pairs of 
parallel redundant shut-off valves. These valves connect 
the OMS manifolds to the crossfeed lines. 

8.3 OMS Operating Functional Paths to the 
Crossfeed Lines 

Operating functional paths for OMS propellant to the 
crossfeed lines are defined as follows (see fig. 17): 

• Left pod OMS fuel to crossfeed line 

00M1 - (0M1) (0M3 + 0M5) (0M15) (0M17) (OM25) 

(0M31 + OM33) (OM39 + CM41) 

• Left pod OMS oxidizer to crossfeed line 

00M2 = (0M1) (0M3 + 0M5) (0M7 + 0M9) (0M11) (.0M13) 

(0M2 3) (OM27 + OM29) (0M3S + 0M37) 

• Right pod OMS fuel to crossfeed line 

COM3 - (0M2) (0M4 + 0M6) (0M16) (0M18) (OM24) 

(OM28 + OM30) (0M42 + 0M44) 
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• Right pod OMS oxidizer to crossfield line 
00M4 = (0M2) (0M4 + 0M6) (0M8 + OMIO) (OM12) 

(OM14) (OM26) (OM32 + OM34) (OM36 + OM38) 

8.4 Operating Functional Paths for Interconnect 
Left OMS to Left RCS Manifolds 

The operating functional paths for supplying propellant 
from the left pod OMS tanks to the left pod RCS manifolds 
are defined as follows (ref. section 8.3): 

• Left RCS fuel manifold A 

ORC340 = (00M1) (RC304) (RC94) 

• Left RCS fuel manifold B 

ORC342 = (00M1) (RC304) (RC92) 

• Left RCS fuel manifold E 

0RC344 = (00M1) (RC304) (RC90) 

• Left RCS fuel manifold C 

0RC346 = (00M1 ) (RC302) (RC96) 

> Left RCS Fuel manifold D 

ORC348 = (OOMl ) (RC302) (RC98) 

• Left RCS oxidizer manifold A 

0RC341 = (00M2) (RC303) (RC91) 

• Left RCS oxidizer manifold B 

0RC343 = (00M2) (RC303) (RC93) 

• Left RCS oxidizer manifold E 

CRC345 = (00M2) (RC303) (RC95) 

• Left RCS oxidizer manifold C 

ORC347 = (OOM2) (RC301) (RC97) 
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• Left RCS oxidizer manifold D 
ORC349 » (OOM2) (RC301) (RC99) 

8. S Operating Functional Paths for Interconnect 
Right OMS to Left RCS Manifolds 

The operating functional paths for supplying propellant 
from the right pod OMS tanks to the left pod RCS manifold 
are defined as follows (ref. section 8.3): 

• Left RCS fuel manifold A 
ORC350 * (00M3) (RC504) (RC94) 

• Left RCS fuel manifold B 
OP.C352 = (00M3) (RC304) (RC92) 

• Left RCS fuel manifold E 
0RC354 * (00M3) (RC304) (RC?0) 

• Left RCS fuel manifold C 
0RC356 * (00M3) (RC302) (RC96) 

• Left RCS fuel manifold D 
0RC358 * (OOM3) (RC302) (RC98) 

• Left RCS oxidizer manifold A 
ORC351 = (OOM4) (RC303) (RC91) 

• Left RCS oxidizer manifold B 
ORC353 = (00M4) (RC303) (RC93) 

• Left RCS oxidizer manifold E 
ORC355 = (0MM4) (RC303) (RC95) 

• Left RCS oxidizer manifoM C 
ORC 357 = (0MM4) (RC3C1) (RC97) 
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• Left RCS oxidizei manifold D 
0RC359 = (OMM4) (RC301) (RC99) 

8.6 Operating Functional Paths for Interconnect 
Lett OMS to Right RCS Manifolds 

The operating functional paths for supplying propellant 
from the left OMS pod to the right RCS manifolds are defined 
as follows (ref. section 8.3): 

• Right RCS fuel manifold A 
ORC30C = (OOM1) (RC308) (RC170) 

• Right RCS fuel manifold B 
ORC362 = (OOM1) (RC308) (RC172) 

• Right RCS fuel manifold E 
0RC364 = (OOM1) (RC308) (RC174) 

• Right RCS fuel manifold C 
0RC366 = (OOM1) (RC306) (RC176) 

• Right RCS fuel manifold D 
ORC368 = (OOM1) (RC305) (RC178) 

• Right RCS oxidizer manifold A 
0RC361 = (OOM2) (RC307) (RC173) 

• Right RCS oxidizer manifold B 
0RC363 = (OOM2) (RC307) (RC173' 

o Right RCS oxidizer manifold E 
ORC365 = (OOM2) (RC307) (RC17*) 

• Right RCS oxidizer manifold C 
ORC367 = (OOM2) (RC305) (RC177) 
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• Right RCS oxidizer manifold D 
ORC369 - (OOM2) (RC305) (RC179) 

8.7 Operating Functional Path? for Intercc .nect 
Right OMS to Right RCS Manifolds 

The operating functional pa.hs for supplying propellant 
from the right OMS pod to the right RCS manifolds are defined 
as follows (ref. section 8.3). 

• Right RCS fuel .aanifold * 

ORC370 = (OOM3) (kJ50°, (RC170) 

• Right RCS fuel manifold B 
ORC372 = (00M3) (RC308) (RC172) 

• Right RCS fuel manifold E 
ORC374 = (00M3) (RC308) (RC174) 

c Righ- RCS' fuel manifold C 

ORC376 = (00M3) (RC306) (RC176) 

• Right RCS fuel manifold D 
ORC378 - (00M3) (RC306) (RC178) 

» Right RCS oxidizer manifold A 
ORC371 = (00M4) (RC307) (RC171) 

• Right RCS oxidizer manifold B 
ORC373 = (OOM4) (RC307) (RC173) 

• Right RCS oxidizer manifold E 
ORC375 = (00M4) (RC307) (RC175) 

• Right RCS oxidizer manifold C 
ORC377 = (COM4) (RC305) (RC177) 

• Right RCS oxidizer manifold D 
ORC379 = (00M4) (RC305) (RC179) 
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8.8 Cross feed Single Point Failure 

During 0M3 burns when the OMS engines .re being supplied 
propellant (from the cargo bay kit) through the crossfeed 
lines, the RCS crossfeed valves are a sngle point failure. 

If an RCS crossfeed valve fails open, the OMS engine will be 
supplied from the RCS tank, since it is at a higher pressure 
than the cargo bay kit. In addition to depleting the RCS 
propellant, the OMS inlet de_^a pressure limit will be 
exceeded. 

A study is presently be^ng conducted to determine if 
this problem can be resolved by changing the RCS and CMS 
ullage pressure. 


8.9 Measurements 

The measurements required for fault detection and annun- 
ciation for OMS/RCS interconnect operation are given in 
tables 4 and 5. 

Six new measurements have been identified to be added 
to the Master Measurements Li:_t. 

Four new measurements are required for monitoring valve 
position of new tank SOV • s that were added to the syscem. 

In addition, redundant helium source pressure transducers 
should be added. System ••t'tus is lost if helium source 
pressure cannot be determined. 
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TABLE 4 , - LEFT OMS MEASUREMENTS FOR FDA DURING LEFT OMS/RCS 



Procondi t ion 
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TABLE 5.- RIGHT OMS MEASUREMENTS FOR FDA DURING RIGHT OMS/ 



Precondition 
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9.0 RCS INTERCONNECT TO CARGO BAY 
AUXILIARY PROPELLANT KIT 

Additional propellant flow operating functional paths 
are available to the RCS manifolds from the cargo lay auxil- 
iary propellant kits. 

The functional paths of the auxiliary propellant from 
the cargo bay kit to the crossfeed lines are shown in 
figure 18. The functional paths are identified as CKXX 
and ere combined into operating functional paths identified 
as OCKXX. 

9.1 Functional Path Analysis of Auxiliary Propellant 

to Crossfeed Line 

The cargo bay kits are added when more OMS delta 
velocity is required than can be supplied by the dedicated 
OMS tanks. Each kit consists of a fuel tank, an oxidizer 
tank, and a helium source bottle. One to three kits may 
be added to the cargo bay. The propellant tanks are 
connected in series, and the helium tanks are added in 
parallel. 

CK1 consists of from one to three helium source bottles 
connected to a common manifold. Each bottle has a volume 
of 15.4 cubic feet. 

CK3 is a shut-off valve allowing helium to be loaded 
from a ground source during servicing. 
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Figure 18. - Cargo bay kit functional paths. 







CK2 and CK4 consist of helium isolation valves in 
series with a primary and secondary helium pressure regu- 
lator. The primary regulator regulates the output to 
218 psig. 

CK5 consists of two helium isolation valves in parallel 
used for positive isolation of from the nelium manifold. 

These valves remain closed when the cargo bay kits are not 
in use. 

CK6 and CK8 are series parallel check valves which 
isolate propellants from the helium manifold. 

CK7 and CK9 are manual shut-off valves used during 
ground servicing only. 

CK10 and CKil consist of a burst disc and poppet relief 
valve. In the event the tanks are subjected to over pressure, 
the burst disc ruptures and the excess helium vents overboard 
through the poppet relief valve. 

CK12 and CK13 are propellant holding tanks. Each tank 
has a volume of approximately 89.5 cubic feet. Each kit 
contains a fuel and an oxidizer tank. A maximum of three 
kits may be installed in a vehicle. 

CK14 through CK17 are series parallel shut-off valves 
wnich isolate the cargo bay kit propellants from the cross- 
feed lines. 

CK18 through CK22 are bulkhead disconnects and feed- 
throughs from the cargo bay to the aft fuselage. 
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9.2 Cargo Bay Kit Operating Functional Paths 

to the Crossfeed Lines 

Operating functional paths, for auxiliary propellant 
from the cargo bay Kit to the crossfeed lines, are defined 
as follows (see fig. 18): 

• Cargo bay auxiliary fuel to crossfeed line 
0CK1 = (CK1 ) (CK2 ♦ CK4) (CK6) (CK7) 

(CK12) (CK14 ♦ CK15) (CK18) 

• Cargo bay auxiliary oxidizer to crossfeed line 
0CK2 = (CK1) (CK2 ♦ CK4) (CK5) (CK8) 

(CK9) (CK1 3) (CK16 ♦ CK17) (CK22) 

9.3 Cargo Bay Kit Operating Functional Paths 

to Aft Left RCS Manifolds 

The functional paths of the auxiliary propellant from 
the cargo bay Kit to the left aft RCS manifolds are defined 
as follows (see figs. 11 and 12): 

• Left aft RCS fuel manifold A 
OCK580 = (0CK1) (RC304) (RC94) 

• Left aft RCS fuel manifold B 
OCK382 = (0CK1 ) (RC304) (RC92) 

• Left aft RCS fuel manifold E 
OCK584 - (0CK1 ) (RC3C4) (RC90) 

• Left aft RCS fuel manifold C 
OCK386 = (0CK1 ) (RC302) (RC96) 

• Left aft RCS fuel manifold D 
OCK388 = (0CK1) (RC302) (RC96) 
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• Left aft RCS oxidizer aanifold A 
OCK381 * (0CK2) (RC303) (RC91) 

e Left aft RCS oxidizer aanifold B 
OCK383 * (OCK2) (RC303) (RC93) 

• Left aft RCS oxidizer aanifold E 
OCK385 * (OCK2) (RC303) (RC95) 

• Left aft RCS oxidizer aanifold C 
OCK387 * (OCK2) (RC301) (RC97) 

• Left aft RCS oxidizer aanifold D 
OCK389 * (0CK2) (RC301) (RC99) 

9.4 Cargo Bay Kit Operating Functional Paths 
to Aft Right RCS Manifolds 

The functional paths of the auxiliary propellant fro* 
the cargo bay kit to the right aft RCS manifolds are defined 
as follows (see figs. 11 and 12): 

• Right aft RCS fuel manifold A 
OCK390 = (0CK1) (RC308) (RC170) 

• Right aft RCS fuel manifold B 
0CK392 = (OCK1) (RC308) (RC172) 

• Right aft RCS fuel manifold E 
OCK394 = (0CK1) (RC308) (RC174) 

• Right aft RCS fuel manifold C 
OCK396 = (0CK1) (RC306) (RC176) 

• Right aft RCS fuel manifold D 
OCK398 = (OCK1) (RC306) (RC178) 
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• Right aft RCS oxidizer manifold A 
0CK391 * (0CK2) (RC307) (RC171) 

• Right aft RCS oxidizer manifold B 
OCK393 = (OCK2) (RC307) (RC173) 

• Right aft RCS oxidizer manifold £ 

OCK395 = (OCK2) (RC307) (RC175) 

• Right aft RCS oxidizer manifold C 
0CK397 = (OCK2) (RC30S) (RC177) 

• Right aft RCS oxidizer manifold D 
OCK599 = (OCK2) (RC305) (RC179) 

9.5 Measurements 

The measurements required for RCS fault detection and 
annunciation are listed in table 6. Five new measurements 
(not in the Master Measurements List), dated November 16, 
1973, are identified. 

Since helium pressure provides the best overall system 
status as well as a means of propellant gauging, the measure 
ment should be redundant. 

Tank pressures are required for leak isolation and over 
pressure monitoring. At least one pressure transducer 
should be added to the fuel and oxidizer tanks. 

Position indicators are required to indicate the posi- 
tion of the SOV’s in functional paths CK14 through CK17. 

An indicator should be added to monitor the status of each 
path or, preferably, the status of each valve. 
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10.0 FLIGHT CONTROL SYSTEM/ REACTION CONTROL 
SYSTEM INTERFACES 


The interface between the flight control system (FCS) 
and the reaction control system (RCS) is not fully defined. 

The basic FCS/RCS interface is shown in figure 19. 

10.1 Interface Operation 

Redundant ON commands from the guidance and control 
computer are routed through two flight critical MDM's to 
the reaction jet driver input buffer. Loss of either ON 
command to the input buffer, or either command failed on, 
results in an illegal command signal to the computer. The 
failed jet is then removed from the jet select logic. 

A valid ON command turns on switching amplifier 
which applies +28 VDC to the ..U2 1 solenoid valve coils, 
that open the engine inlet valves. The propellants then 
impinge and ignite in the thrust chamber. As chamber pressure 
builds up, the chamber pressure switches close sending a 
signal back to the monitor to indicate a good fire sequence. 

10,2 Detectable Failure 

Failure of one of the ON commands in either state results 
in an illegal command signal to the computer. 

A legal ON command without a pressure switch closure 
results in a no-fire signal to the computer. In either case, 
the computer removes the thruster from the jet select logic. 
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Figure 19. - Basic FCS/RCS interface. 
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A thrust chamber pressure switch closure without a 
valid ON command results in a failed on signal. The monitor 
closes the manifold isolation valves and the computer 
removes all jets on the manifold from the jet select logic. 

10.3 Undetectable Failures 

o\ itching amplifier on failures cannot be isolated 
except as a failed on jet. This failure presently results 
in the loss of all jets on the manifold. The addition of 
a switching amplifier output measurement and l circuit 
breaker, between the bus line and the amplifier, would 
allow single jet isolation for a switching amplifier on 
failure. Other methods to preclude a pressure switch failure 
from failing the whole manifold are being studied. 

Failure of a single thruster inlet valve in the open 
position can only be detected as a leak. Addition of 
position indicators on the thruster inlet valves would 
eliminate this problem. The addition of manifold pressure 
measurements downstream of the thruster isolation valves 
is required, if the leak isolation method is used to isolate 
this failure. 
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11.0 CONCLUSIONS AND RECOMMENDATIONS 

11.1 System Definition 

The RCS is not fully defined at this time; however, 
the basic measurement requirements for fault detection and 
annunciation should be nearly identical to those listed in 
this document. 

11.2 Forward RCS 

Twenty-eight new measurements not presently included in 
the Master Measurement List, dated November 16, 1973, have 
been identified as requirements for FDA. These measurements 
should be added to the Master Measurement List. 

The new measurements are identified as follows: 


Engine burn through monitors 

16 

ea 

Manifold pressures 

10 

ea 

Helium source pressure 

2 

ea 


Due to lack of configuration information on the forward 
RCS doors, monitoring of the RCS doors has not been considered 
in this report. Dojr monitoring will be required during 
operational missions. 

11.3 Left and Right Aft RCS 

Seventy- two new measurements not presently included in 
the Master Measurement List, dated November 16, 1973, have 
been identified as requirements for FDA. These measurements 
should be added to the Master Measurement List. 
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The new measurements are identified as follows: 


• Engine burn through monitors 28 ea 

• Manifold pressures 20 ea 

• Manifold and tank SOV's 16 ea 

• Helium source pressures 4 ea 

• Engine temperatures 4 ea 


11.4 RCS Crossfeed/Interconnect Operation 

Eleven new measurements are required for crossfeed 
monitoring. They are identified as follows: 



OMS crossfeed SOV position 

4 

ea 


OMS helium source pressure 

2 

ea 


Auxiliary propellant helium source 




pressure 

1 

ea 


Auxiliary propellant tank pressures 

2 

ea 


Auxiliary propellant SOV positions 

2 

ea 


The RCS crossfeed valves are single point failures, 
which could result in depleting the RCS propellant tank 
associated with the failed valve during some OMS engine 
burns . 

The RCS propellant tanks operate at a higher pressure 
than the cargo bay tanks. If the OMS engine is being 
supplied by the cargo bay propellant tanks, and an RCS cross- 
feed valve fails open, the associated RCS tank will be 
depleted. A study is being conducted by Rockwell International 
to resolve this problem. Consideration is being given to 
equalizing OMS and RCS ullage pressures. 
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11.5 FCS/RCS Interface 


Consideration should be given to the following in the 
design of the reaction jet drivers. 

As a minimum, the reaction jet drivers should provide 
the following: 

• Redundant chamber pressure sensors. 

• Jet driver output monitors. 

• Jet driver electrical-ON failure isolation 
capabili + y . 

• Single jet driver power isolation capability. 

• Failure identification annunciation. 
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